In Docker Desktop on Windows before 4.12.0 an argument... · CVE-2023-0633 · GitHub Advisory Database · GitHub

In Docker Desktop on Windows before 4.12.0 an argument...

High severity Unreviewed Published Sep 25, 2023 to the GitHub Advisory Database • Updated Apr 4, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in local privilege escalation (LPE).This issue affects Docker Desktop: before 4.12.0.

References

Published by the National Vulnerability Database

Sep 25, 2023

Published to the GitHub Advisory Database Sep 25, 2023

Last updated Apr 4, 2024

Severity

High

7.2

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

High

Privileges required

Low

User interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

None

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N